How to Include a Body in POST Token Request for OAuth Provider

[peyronoscar]

Is it possible to include a body in the fetch request when obtaining an access token with OAuth? It seems like token.request is being ignored and that token.url is being used without any control over the request.

const authorizationHeader = btoa(`${process.env.AUTH_CLIENT_ID}:${process.env.AUTH_CLIENT_SECRET}`);
const shopifyBasePath = `https://shopify.com/<SHOP_ID>/auth/oauth`;
const redirectUri = `<REDIRECT_URI>`;

function generateState() {
   const timestamp = Date.now().toString();
   const randomString = Math.random().toString(36).substring(2);
   return timestamp + randomString;
}

export const { handlers, signIn, signOut, auth } = NextAuth({
   providers: [
      {
         id: "shopify",
         name: "Shopify",
         type: "oauth",
         clientId: process.env.AUTH_CLIENT_ID,
         clientSecret: process.env.AUTH_CLIENT_SECRET,
         authorization: {
            url: `${shopifyBasePath}/authorize`,
            params: {
               scope: 'openid email https://api.customers.com/auth/customer.graphql',
               client_id: process.env.AUTH_CLIENT_ID,
               response_type: 'code',
               redirect_uri: redirectUri,
               state: generateState(),
            },
         },
         checks: ['none'],
         token: {
            // This is used after the authorization code has been received
            url: `${shopifyBasePath}/token`,
            // This is never called
            async request(context: any) {
               try {
                  const response = await fetch(`${shopifyBasePath}/token`, {
                     method: 'POST',
                     headers: {
                        'Content-Type': 'application/x-www-form-urlencoded',
                        Authorization: `Basic ${authorizationHeader}`,
                     },
                     body: new URLSearchParams({
                        grant_type: 'authorization_code',
                        client_id: process.env.AUTH_CLIENT_ID!,
                        redirect_uri: redirectUri,
                        code: context.params.code || '',
                     }),
                  });
                  const body = await response.json();
                  return { tokens: body };
               } catch (err: any) {
                  throw new Error(err);
               }
            },
         },
         userinfo: {
            url: `${shopifyBasePath}/userinfo`,
            async request() {
               return {
                  id: '123',
                  name: 'John Doe',
                  email: ''
               };
            },
         },
         profile(profile): {
            id: string;
            email: string;
         } {
            return {
               id: profile.sub,
               email: profile.email,
            };
         },
      }
   ],
})

[liho00]

same issue here